Overview

overview

10

Static

static

10

Yandex.exe

windows7-x64

10

Yandex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Yandex.exe

  • Size

    316KB

  • Sample

    250129-x3zrzaxkcy

  • MD5

    74a53d4f5be3be53932f861a212b4120

  • SHA1

    7ef1acc4dc0f5cd6941d2ca38defdaa3c03d077f

  • SHA256

    f6a0a04cd3557910ae08dab46f00c96c83579de7716e925b533c25162ff2de88

  • SHA512

    9e90b258ea794bb5c4a2c1608afedc39a2c0e98b66d8f930c6b509d147c79621ba6664f57ee862572deebb50c67f7bcd077062b5ce8ba33f98e417ec37250b65

  • SSDEEP

    6144:t+Vr2RFMVrqcinHAWnVjpTaB822Z9rra97TQLwtI6TS:hRQrqXZVIaE9ewtjS

Score
10/10
stormkittyspywarestealer

Malware Config

Targets

    • Target

      Yandex.exe

    • Size

      316KB

    • MD5

      74a53d4f5be3be53932f861a212b4120

    • SHA1

      7ef1acc4dc0f5cd6941d2ca38defdaa3c03d077f

    • SHA256

      f6a0a04cd3557910ae08dab46f00c96c83579de7716e925b533c25162ff2de88

    • SHA512

      9e90b258ea794bb5c4a2c1608afedc39a2c0e98b66d8f930c6b509d147c79621ba6664f57ee862572deebb50c67f7bcd077062b5ce8ba33f98e417ec37250b65

    • SSDEEP

      6144:t+Vr2RFMVrqcinHAWnVjpTaB822Z9rra97TQLwtI6TS:hRQrqXZVIaE9ewtjS

    Score
    10/10
    stormkittyspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks